Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
File: EdGf2unFPY0oseQcqROcM1VrpiU.mft (raw, json)
Hash identifier: 296E8gce3ouDwC01W46xMScP9KPS1v6qilFYMhpsKEM=
Subject key identifier: F5:F4:8B:60:48:8F:97:E2:DB:7E:B0:9F:D9:25:F9:C5:24:12:2E:31
Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
Certificate issuer: /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Certificate serial: 019D99626BC9DD7EA8A582BEA88E101748DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
Manifest number: 0D21
Signing time: Fri 17 Apr 2026 03:00:57 +0000
Manifest this update: Fri 17 Apr 2026 03:00:57 +0000
Manifest next update: Sat 18 Apr 2026 03:00:57 +0000
Files and hashes: 1: EdGf2unFPY0oseQcqROcM1VrpiU.crl (hash: SPbrh9vUrkc6m476BcLWIsIgBGT6PZf43PdwH6L3jbc=)
2: _cYlNrPZ4aNJF3IHILF10hUz1QE.roa (hash: 055GVfTacul6sO6E7JP7r8Y/ZviD+fN14ITbu8RYmeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:6b:c9:dd:7e:a8:a5:82:be:a8:8e:10:17:48:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Validity
Not Before: Apr 17 03:00:57 2026 GMT
Not After : Apr 18 03:00:57 2026 GMT
Subject: CN=f5f48b60488f97e2db7eb09fd925f9c524122e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6c:33:c2:35:fc:54:63:cb:ba:01:c5:7c:55:
2d:2a:87:9c:0b:3c:3b:5e:22:f9:d0:72:07:b1:cb:
73:e3:24:f2:6f:31:f5:1c:7b:05:c2:5d:d8:5e:7d:
11:e7:b5:55:77:9e:61:b3:99:1d:9f:31:b8:33:3d:
58:ca:85:1d:dd:70:54:f2:3e:3a:e1:73:eb:43:10:
4e:15:21:39:69:aa:66:e4:e6:39:a2:96:c5:5b:48:
4a:e8:02:71:6c:75:33:3b:9e:86:dd:9e:51:f8:90:
ad:e6:b0:10:af:18:ba:36:d3:28:af:03:1e:b1:1e:
1e:22:21:c5:14:0f:1e:dd:a8:ef:e4:1a:07:1c:9b:
99:bb:2c:eb:9f:63:1a:ae:28:af:d8:31:fa:0d:9f:
29:0e:95:d4:9e:ad:53:2f:a3:57:65:bb:67:e8:ca:
f0:a5:82:e9:2d:11:12:b0:53:73:75:9b:85:0c:c0:
6d:f2:2d:d9:e6:7c:48:84:57:08:39:11:d1:9d:67:
bb:d5:9a:19:29:68:c3:dc:88:51:89:d3:ca:e2:ae:
a9:27:d9:cf:f2:c0:58:69:4b:ac:c4:84:cf:74:e7:
c2:90:05:c0:9f:74:5c:10:40:88:f7:fd:9d:fb:ca:
48:b7:e5:bd:02:ba:d0:78:d7:d5:49:5d:72:03:db:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F4:8B:60:48:8F:97:E2:DB:7E:B0:9F:D9:25:F9:C5:24:12:2E:31
X509v3 Authority Key Identifier:
keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f8:c6:c7:ab:13:1d:aa:00:3f:98:36:0e:98:8b:2a:65:01:
b8:bf:9c:9a:37:e1:ff:93:bf:7b:1b:67:f3:ae:22:b9:79:5c:
5e:2b:48:86:b9:07:25:ed:e4:ae:3b:04:fc:93:15:3e:79:51:
77:33:17:0f:bc:af:6f:69:4e:97:19:fe:0d:d3:fb:8c:72:b4:
f5:e9:98:da:8c:83:2a:42:f4:db:44:79:ab:17:27:17:3f:e3:
13:7e:98:b0:a5:bd:bd:f2:e7:e7:62:85:6a:64:d4:9c:23:72:
ac:e4:17:76:e6:ae:db:c8:53:99:f0:ef:2b:9c:44:8c:a1:1c:
70:f3:cd:ef:13:1e:25:0a:08:53:4e:01:93:81:01:ba:37:f1:
0b:b0:c3:ac:1d:26:ff:45:dc:e2:3c:e7:d1:a0:ab:ff:fd:82:
f1:6d:93:20:e7:39:dd:0b:3d:93:a5:61:a8:23:fe:59:5c:5b:
da:34:f0:4a:1f:6f:19:59:fc:45:82:e4:47:23:d3:40:a3:78:
12:80:b0:58:00:71:21:0a:bb:c7:ca:52:73:bf:cd:17:29:f0:
f2:5c:86:9c:90:3f:7a:94:ac:cf:84:52:85:5e:33:04:4b:f8:
81:51:db:fd:2b:ff:77:6a:02:26:80:6c:2a:e7:fa:0a:1e:5a:
95:34:38:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:44:56 2026 by rpki-client